...

For all P-Codes and the P-Value, please ask your sale, provider or support@htek.com for the file Htek_Parameter_List.

3. Encrypt cfgMAC.xml

Htek Configuration Generator allows user to encrypt the generated configuration file with AES 128-bit encryption. It allows user to choose not to encrypt the configuration file in Windows version, but it is recommended to use encryption for security reason.

3.1 How to encrypt the XML configuration file

The XML configuration file could be encrypted in using AES-128-CBC algorithm. The encryption password

You could encrypt the cfgMAC.xml file using a key that contains 16 characters, the valid character is in [0 - 9, A - F].

openssl enc -aes-128-cbc -K 001FC1BC -iv 0B1E1D000F0B07091D1F04071F1E0407 -in cfg001fc11e5105.xml -out cfg001fc11e5105b.xml

The encryption key is defined in P8631 (Management->Auto Provision->Set Common AES Key) of the configuration file.
The Password length is from 1-16, and password must be [ 0-9, A-F]
THE SHARED IV: 0B1E1D000F0B07091D1F04071F1E0407
The OpenSSL command-line to encrypt the file is as follows:
Openssl enc –e –aes-128-cbc –K <password>-iv 0B1E1D000F0B07091D1F04071F1E0407 –in cfg.xml –out cfgxxxxxxxxxxxx.xml
When the XML configuration file is encrypted in this method, Phone would only be able to decrypt and parse the file if user set the XML Config File Password in P8631 of binary configuration file or in the web UI.
Detailed steps:
Step 1: Login webpage, click Management→Configuration, download cfg.xml file, then run, input "Openssl enc –e –aes-128-cbc –K <password>-iv 0B1E1D000F0B07091D1F04071F1E0407 –in cfg.xml –out Cfgxxxxxxxxxxxx.xml" (xxxxxxxxxxxx is the MAC address) 
THE SHARED IV: 0B1E1D000F0B07091D1F04071F1E0407
Step 2: Put the Cfgxxxxxxxxxxxx.xml under upgrade server path
Step 3: You must set the AES Key: Management→Auto Provision: AES Key:

...